Bug 890277

Summary:	sys-apps/firejail warning: FORTIFY_SOURCE redefined with gcc12 hardened _F_S=3
Product:	Gentoo Linux	Reporter:	genBTC
Component:	Current packages	Assignee:	Hank Leininger <hlein>
Status:	RESOLVED FIXED
Severity:	normal	CC:	proxy-maint
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---
Bug Depends on:
Bug Blocks:	847148
Attachments:	firejail build.log

Description genBTC 2023-01-09 08:48:12 UTC

When using gentoo-hardened with the new  fortify-source-3.patch  built into Gcc-12.2.1_p20221231 ,
firejail package results in a warning about a definition redefined collision.

<command-line>: warning: "_FORTIFY_SOURCE" redefined
<built-in>: note: this is the location of the previous definition

Meaning the package has _F_S=2 hardcoded internally somewhere and that flag should be stripped so _F_S=3 can take effect without conflict.

package has _F_S=2 hardcoded into src/common.mk.in and src/*/Makefile.in , and likely needs an ebuild tweak similar to the ones that already exists on line 55-57 in the .ebuild that had been tweaked to sed CFLAGS out.

Reproducible: Always

Comment 1 genBTC 2023-01-09 08:49:10 UTC

Created attachment 848007 [details]
firejail build.log

warning: "_FORTIFY_SOURCE" redefined

Comment 2 Larry the Git Cow gentoo-dev

2023-01-18 21:54:03 UTC

The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=64b845ce645aebce34d90053324191d5db6f6056

commit 64b845ce645aebce34d90053324191d5db6f6056
Author:     Sam James <sam@gentoo.org>
AuthorDate: 2023-01-18 02:29:24 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2023-01-18 21:48:58 +0000

    sys-apps/firejail: add 0.9.72
    
    Closes: https://bugs.gentoo.org/890277
    Signed-off-by: Sam James <sam@gentoo.org>

 sys-apps/firejail/Manifest               |   1 +
 sys-apps/firejail/firejail-0.9.72.ebuild | 138 +++++++++++++++++++++++++++++++
 2 files changed, 139 insertions(+)